The government's response to the PIPEDA review included a promise to consult on possible reforms to the law, including the creation of a mandatory data breach notification requirement. On Friday, Industry Canada published the promised consultation in the Canada Gazette, asking Canadians for comments on the data breach requirement along with a series of smaller changes to Canada's national privacy law. For those that don't have PIPEDA consultation fatigue – this is effectively the third consultation on these issues in the past 18 months (the Privacy Commissioner consultation, the Ethics Committee hearings, and now the Industry Canada consultation) – the deadline for responses is January 15, 2008.
Industry Canada Launches Public Consultation on PIPEDA Reforms
October 29, 2007
Share this post
One Comment

Law Bytes
Episode 267: Peter Nowak on Rogers, the Shaw Merger Aftermath, and the Limits of Canadian Telecom Policy
byMichael Geist

May 4, 2026
Michael Geist
April 27, 2026
Michael Geist
Ep. 265 – Jason Millar on Claude Mythos, Project Glasswing, and the Governance Crisis in Frontier AI
April 20, 2026
Michael Geist
March 30, 2026
Michael Geist
Search Results placeholder
Michael Geist on Substack
Recent Posts
The Law Bytes Podcast, Episode 267: Peter Nowak on Rogers, the Shaw Merger Aftermath, and the Limits of Canadian Telecom Policy
Going Through the Motions: How Parliament Is Shutting Down Study and Debate on Political Party Privacy
Why The Senate Got Antisemitism Only Half-Right
The Government Doubles Down on News Sector Support: Fiscal Update Opens the Door to Tens of Millions in Tax Credits for Bell, Rogers and Corus
The Illusion of Protection: Why Canada’s Growing Push to Ban Social Media for Kids Won’t Work

It is about time the government stepped in and began forcing “all” organizations to assist the innocent public with mandatory notification. They must be made to take responsibility for their errors. Of course, notification is now insufficient without some kind of credit monitoring offer as well.